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[ISM] 'h*v»|iitt^T»JW6gfcfrx.4, RSA 
R S Aff-§-jft*3fe1t£, iDM#Ei» 3 t 
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X 



t I till I 
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cvj 
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&ffl¥- 11-14 3 



1 

RSAie-s-aasrfT^RSAtt-g-afcjHeii^ij^T, g 

t R S AHP3-jft*£1t. 

Bo 

i^*«5] mm;*?* -9&nm&Tkif/t tz\±m 

10 0 0 1 ] 

Iftioit *5MBtt> R S ABH3-©** 

[0 0 0 2] 

.'jii«©3*LTj&as:fc*o ^oi^am^flMUi, 

^«¥^nTt6T*$)^. bjrV ZS-f-fl, b WESiJd s B 

r, ASWig*<7)S^±-C3tt LtW, ftXBKJHn 
oftr§fcBf^&«7&*&g£*ir:&»), a*©*? h-7 

[0 0 0 3] Hg-Sf-iti, tttt0*Mc]P3*#JgM1.Ciia 

v>r, t6T^a»-e#^7c<7)S: (¥5:) **=#ki±* 
f>*v>i: (Bg-^-i:) tcgesii-ai tOTt-sg-fbr 



2 

[0004] ioA-Sfcttfrffl^aBf-^ffc^fctt, 

WLt, &BB«flH-*T«i, £ffl2tiX^Z$:m%<D 

[0 0 0 5] fcH*tf-£#©*T*fe#a&llt#*i:L 

r, 1977^1-Rivest, Shamir&tfAdleman ©3AK.fco 
t^^fLtRSA^^So £17, iWRSABt-g- 

[0 0 0 6] R S ABf-f-t? (i, ( e . N) , 

» (d. N) , ¥:££M, l&SrX* C b Lfclfrt* 

f b E b D © r /u >j X a wt , ^ § ftff&ift* * jb 

C = E (M) =Me mod N 
M=D (C) =Cdmod N 

{IL, e • d=l mod[LCM | (p-1) , (q- 
1) I ] , 

N=p • q (p, ql± 

e , n : temm 
d : mmm 

L CM (Lowest Common Multiple) : ft/MH9r$fe 
[0 0 0 7] ±fE5£©*&-g-lc:, *ti-?ti e gfc 

e, d, M, NJ± 512 e y h&>±<DJz£%:&&tfm^b 

ft, iSiSJiiSftfife^fflv^r fc, 1 e©r s ASt#r-¥ 

770iao*||Ci:*|jfeaHJ|[i:tfi*>4»tfHfa:fe*v» o 
J: or, RSARf^iS^Srft&Ufi^fctoKtt, §!|£?K 

»Wiftia-fb^^pl^.r^ 0 , 4#tc#j^r*#«±, am 
^*?tLrv^-5 0 

[0 0 0 8] RSA«-9-Kft*«tL*&BHtt«F**«># 

< r^ijffl^^s^^^fij^T^^uxA^itsjs^a-t 

(#^¥7 - 20778 ^-<Zr#) 0 CQ*tt*|&iftfti£tt-? 

[0 0 0 9] lit, t^^iJOT^^'JXACOK 

rffi#icgiB^i-So t^^'XOTi^'jXAii^ ih^ 

OftN (N>1) »^OftNtB>Cit*iig 
Rt*fflv>4t, ttSBj^»T*»oTR-l modNOff-^ 
*»cRKJ:4l!6«0*TfTiL*Ci:*3BlfflLr, Nlci 



(3) 



ftmW- 1 1 - 1 4 3 6 8 8 



N, N' , R, R-ixVTfisac-e* 
»K ^&8fcTliO£T<RN. R-Hi3HjfeOSNOJ: 
^0*»ROifijft-C*»K RR-i-NN' =1 (O^R 
■KN, O^N' <R) OH«*atfci- 0 
[0 0 10) £O£»RK2<0^§3SMR*ffifflL 

fc**"C§*fca6 % T-TR-i modNOtfJt^lftaiaa** 

modNOT;um;XAREDC (T) S-JSLTU*i- 0 fit, 

^or;vn*»;>CAtc^v^r. (T + mN) /Rttifc-fffl io 

T — TR-i modNOT^Vrru XAREDC (T) * 

REDC (REDC (T) X (R2 m od N) 
= (TR-i modN) 
= TR-1XR2 XR-1 
= T modN 

X ^ \Z LT, ffi&bZT modN 
[0 0 12] 

L J: 9 t + #58^7 -20778 ^ 20 

UXA-CoaSScJi^v^^lct&jlftLTV^*^ RSAi 

[0 0 13] RSABg^-ii. *H«Bff-S-0* 

r s a Bf^ffl ofss^ ? y <o hs^toek ^ at* itr 

v^ 0 L^L. jfi^ R S ABg-^OSJsjKOffiT^ov^T 
»;RS*i*.J:7fcft*K RSAB&*fcft*>*&HMMH§- 

[0014] ffiRBg^-o^Tifftcov^T, jaT^iaa 

tS 0 IfSftFp (pl±p>3 05R») tc&v^T. Fp 
±<7)*IRffiiSLE (Fp) fi. 
y 2 = x 3 + a x + b 

lit, a, biiO^a, b < p & >9 . 

4 a 3 +27 b 2 * 0 (mod p) 

T-mZti, »raffi»±tf>j&i:«i, E (Fp) l^jfit 



-OlIRffi^E (Fp) ±£>jft«i, JBlT<02ni 



[0 0 15] 

(1) 0 + 0 = 0 

(2) (x, y) +0 = 

(3) (x, y) + (x 
(jft (x, y) tjS (x 

-6) 

(4) MO««|:4v^2jS (xi, yi) 
y 2 ) CWlt, (x 3 , y 3 ) 
<D (xi , yi) * (x2 , y2 ) <7>*§^ 

(xi , yi) + (x2, y2) = (x3, Y3) 
ilL^ X3=A2— xi— x 2 
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(x, y) 
-y) =0 
-y) fcJiiKSBcOE 



t (X2 , 



50 



*m = (T modR) N' modR 
t = (T + mN) /R 

*>U t<N<D»*Klit t -NIP 

REDC (T) = t ( t <N) 

REDC (T) - t-N (t^N) 
[0011] 1 EOREDC-Cti, fM^T modNTfift < T 
R-l modN****fefL-&/ftt"C*^ 0 *J£rT m 

odN**#&*:#KW\ J^TK^-fJ: -5 K> REDC (T) 
i^»*ftT*3V**:R2mod NiOSTTN I? t^REDC £ ^ 
V> 0 

) 

(R2 mod N) R-i modN 
modN 

y 3 = A ( x l — X3 ) — y l 

A = (yi — y2 ) / (xi — X2 ) 

© (xi , yi) = (x2, y2 ) com-£ 

2 (xi , yi ) = (x3 , y3 ) 
{IU x 3 = A2 - 2 xi 

y 3 = A (xi — x3 ) — y i 

A = (3 xi 2 + a ) /2yi 

[0016] t»nffl«uiojft4:wa^snj|[i--s^ 

It^o IP*>. (x, y) £ (x/z, y/z) fcttf 
(H^tc^S) o H^tcT^ L/:^(7)Ii^^ 

ffiUfcwt. mod p J:-ciratt*#) ^ff^o zj 

1f <7>i££5cz-i mod p*##. f^xlgj^ylg? 

[0 0 17] ±»LfcJ:dft«lRflf-g-»J|[*tf-7»^ 

±U(Dljm^-)^ (4) COi^t^ ^#*^r^ 

*L4tf*U;T*S>$:^o R S ABS-e-a^Srfr^EIBf 

«*»*&o « x. ^192 If y.hOiit#MMi: 10000 Effigii 
^ i; ^ Kr*(i^i2^\ *>3\* y -fAQ* 
^^-^T;UrruXATii. *&7- 3 (Pentium 13 

3 MHz) o 

[0 0 18] *»Wtt»f*&*W»c«i*rftSiLfcfco 
[0 0 1 9] ^ISWOjfiogttJi, R S ABf-§-rI»:gM 




(4) 



®ffl¥ 11-14 3 



[0 0 2 0] *»9!C!>Mfcte0>§ttU\ /hSv»B»JM| 
10 0 2 1] 

o 

[0 0 2 2] f|«£ 2 & R S AfflHg-»*»1Itt, * 

»#J1- & 7 - * > ^ 'J £Kttfc**M&»*EJi& 

[0 0 2 4] f»*S4 ^ff*|»ni***J«61l*i. n« 
T^^'jXA^i5*t&2tt4«©«ft<0 J D»#ka * # « 



[0 0 2 5] k&s 5 K^s^raw^iMtEawu 

[0 0 2 6] Bill, «HOSililit*^ Site 
#v>Tll±. RSABff^XtrtHRie^oatJlCSrffdatJlC 

d p SrW-*i-&R2 mod p \%%m& 4 * > rf > 

a X b — REDC ( a 
in* a + b — a + b> 

MM- a-b — a>bO 

[0031] mm^ msmnmi&*\zzs xruj 

It, 23 X R mod p<7^>rf^t U >f ^ 23 -1 = 

Z3 -IX R-iX R mod p= 2 3 - 1 mod p*r:R»t\ REDC * 
REDC((x 3 XR mod p) x Z 3 -i) 
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[0 0 2 7] Hl<OflMEtt % RSABt*»J«6«Win« 
R S ABS^«*tff^&/f»tT4 <»n»-^atj([4tfx. 
[0 0 2 8] *^<7)aMIi:o^tMt 

£ R2mod p «£EI»4 fcfcffl^Tfi^o 
*&&P (xo/zo, yo/zo) 
Xo =REDC (xo X R2 m od p ) 
= xo X R2 x R-l mod p 
= x o x R mod p 
Yo =REDC (yo X R2 mo d p ) 
= yo X R2 x R-l mod p 
= y o x R mod p 
Zo =REDC (zo X R2 mod p ) 
= zo X R2 x R-l mod p 
= z o X R mod p 

[0 0 2 9] V*^<Oft*««i, tmfr-MZ 

^xmmfrdo -toft** lSkT^itZ^<mMi 
mod p co±x^yd Z-tfcft&o 
[0 0 3 0] * (xi, yi, zi) , (x 2 , V2 , 
z 2 ) <0»JMS*«:jiSC (x 3 

(1) 2)0* (W4*2jft) 
X3 = AB 

y 3 = C (A2 xi Z2 -B) 
Z3 = A3 2 1 22 

flL* A=x2 zi — xi Z2 , 
A2 D 

C=y2 21 - yi 22, D=X2 ZI +X1 Z2 

(2) 2«J* (Wi: A) 
X3 = 2 AB 

y3 = C (4 D-B) - 8 E2 
z 3 = 8 A3 

fiU A=yi zi, B = C2 - 8 D, C=3xi 
2 + a 21 2 , D=xiE, E 

r-mzti&o mmAz&^ ^a, 

x b) 

p Oifrfr a + b - p 
a + b 
a-b 
a — b + p 

*K(x 3 XR mod p) XZ3-1) t REDC ( ( y 3 X R mod 

p) XZ3-1) t^ft#-r^o j£ft«ffmB6a, 

-XT^'JXA) K*^v>T*J|^fr?o **** 

= X3 X R X 23 -IX R-l mod p 



, y 3, z 3 ) ti~& t 

— A3 y i 2 2 

B = C 2 2 1 Z 2 " 



: yi A 



(5) 



11- 1 4 3 6 8 8 



REDC((y3 XR mod p) XZ3-O = 



t 4 4. 

; [0032] &.±.<»mnmwK£ mnmm±omtib 



~[0 0 3 3] 

^ k P = ( x 1 , 
: k Qb = (x2 



yi ) 
y2 ) 

^l^r-cffffL, Bt^e^#So (xi, yi , C) £ 

'? [0 0 3 4] (^«#BfflTO«-?-fb) dB (xi, y 
1) = dB k P = k dB P= k Qb = (x2 , y2 ) £ 

= Bg-§-5:ctx2 t<o#Nfee«jii3*o£xoRiae&7 

[0 0 3 5] ±j£L£.M&fl|J!U;:i3V>-C, *f§9J<o* 

[0 0 3 6] tfc, *f&9J«Di£&«IIIlS&6fi, 2oO 
tf4cw^) Cj^fLT, 1 ^^T-lfflBfKrSCgS-fr 
[0 0 3 7] t fz. *&W<0 p ' mn-mm 5 £ i££Sc«|£ 

$ < 

[0 0 3 8] 

[s&9§ onuses*] wt. *&wz*<Dmm<Di&mz 

3, R2modp rS[||H]S&4, p' ?^J§:[IIS& 5 
#[I]g&6<7)#II]S§<£>^- K^^TlS^?r^rri2lT-*So 
HI 3 ~I3 7 =Sr#B?, |_T, ^IlIg&lcov^T^M^SiB^i- 

[0 0 3 9] (#H[» DJ$) H3H, JK#JH&3t 

'j7/7n-;^U 64X64ft*S«i64e^ h X64tf 
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8 

= x 3 X z 3 - 1 mod p 
y3 X R X z3 -IX R-i mod p 
= y 3 x z 3 _1 mod p 

[0 0 4 0] *«0*JHBI**»EItt2"Cli. ^fp^W* 

ih&o «x.lf. 3£*»A (192 bfy h) , (192 
\£y h) bLtz&&. *»B*64fcT? Hlfii:*ilLT 

[0 0 4 1 ] ^e>rf> 'J*"C«i. Tfi64tf^ h^-T-CT 

H**»#i:«*4:l9, Ttt64 tf y h * t>ff# LT v> < 

ffi (192 +64 tf y h) ^Ttt64bT ^ h^Otflr&id 
K> pO«»:*Jg.LTv*< 0 pOf&^ti, Ttt64tfy h 
<*>fi£Kp' Sr*tt>t»*OTffi64try K**^ 
AXBi, AXB2J:B*otmt!r^o 
[0 0 4 2] JSITK. T;vrf ij ^^"To 

i = 0 ; i < 3 ; + + 

i — 0 , 0 
W— AXBi + W 

W^-W + (((W mod 2 64) x p ' ) mod 2 64) Xp 
W— W/ 2 64 

[0 0 4 3] (SDS^H^) H 4 t±, SDMSHim 3 Oft 
3*1" o EHciSV^T. FF(±7'j7/7n 
y 7\ 64 F F (±64 tf y h<07*) y ~?7 o y 7\ 64jD^tf 

[0044] mmn^3 tc^v^r. 37>Ki/y^^ 

[0 0 4 5] 
[^1] 

« 1 
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^1 ffl*l'?3' 






b 


- P 




-b 


P 



[0 0 4 6] a, b, p £64tf? hJM£^T&^<bSri£ 

i-««ftli:3Hfi7. 
[0 0 4 7] 
1^2] 



& 

o 



(6) 



ftfflW- 1 1-14 3 



10 











a + b 


a + b -p 




a -b 


a-b + p 



[0 0 4 8] 3@§(Oim *l f *2(D64iDjM*"C 



10 



[0 0 4 9] 
[*3] 

3 





* + 'J - 1 


+ t'J-2 






1 


X 






0 


1 






0 


0 






1 


X 




0 


X 





CO 



[0050] (R2 m0 d p muma) hsu, R2 mo d 
p i**m^4ortgB«^;(0"^j^^i- 0 hksv^-c. f 

Y* 



R mod p, 
YX 2 mod p 
T- 1 , L 



^77^4 R2 mod p «— Y 



» [0051] p<7)«£i92 tr^ h fcf&o ip 

R= 2192 t *&H*fflV^ R2 m0 d p «*IIIK4 

"Cfi. 2384 m od p iifc ft £ 0 36*694* 

T— 192 

. T = 0 commit 7^4^ 



Y — R mod p, T 
Y^-YX 4 mod p 
T^T-2, & I, 

R2 mod p ^Y 



[0 0 5 2] £<7) J: ^ &YX 4 mod p<Dft^£^- 
^Ttff^^ &fcfc5|j^4v* % -p, -2p, -3 

*S^;ft3SK&&o *W<^R2mod p rS*[ll^4 T'ti. 



40 



-192 

T= O^^fi^^y ^4^ 

^-ttjy l ^fi^x^7 p 2^ 

T2ffl(7)Snff^ (#1, »2 064iD#S) -CtTV^ 13, 

[0 0 5 3] 
[3E4] 



(7) 



ftmW- 1 1 - 1 4 3 6 8 8 



11 



12 



Y 


p 


& s 




0 0 0 


1 X 


^H-K^ff^fi: 2 \£y b is 7 b 


± 0 


0 0 1 


1 X 


2 t: -y bis? h«~P 


-p 


0 1 0 


1 0 




-p*/cti-2p 


0 1 0 


1 1 


2 t: ~> bis? htft-p 


-P 


0 1 1 


1 0 


lh>h^7h8-p £ <b{Z 1 fcf* h h^-p 


-2p £*=tt-3p 


0 1 1 


1 1 


i f^'>7ft-p &tz& 2 \iy byy b13k'P 


-p£/^t±-2p 


1 XX 


1 X 




-2p £/c(*-3p 



[0 0 5 4] 4*3, 1024 tf y h OR SAiiOft^i: 
Wt. R=2i024t L"CR2mod p 4 -rCO^JtS- 

[0 0 5 5] (p' }f3K3B&) H6li, p' »£IB&5 
onffifllJiEO-WISr^i-o *$&9JtMi. 1 tf y FO->7 

[0 0 5 6] 'Jltlt RXR-i-pXp' = 

i<h&& P - zm^xmwzff 7o p' «*ia»5"Ci 

7sTV-f\ Y — 0, T 

A<ry72 Y mod 2= 0 

^f7^3 Y— Y/2 

Xf7^4 T=63C0^ 

[0 0 5 8] £<0«£ti. TflWfcT* p^Ji 

flF*Snx--C^< vT (h J; *9 , Tffi64kf u> h^l^T 1 K 

[0 0 5 9] (&ftffi?t01ft (^r>rf> i; >f wt-** 

^"fo EUwj5V*T\ FFIi7'j77'7n77 p , 64FFt± 
64 tf y b <0 7 'J y 77 u y 7\ 64*0 It S f*64 If * b cojfl 

jr»**fLHrii*-ro *»93-cwt, * i o64*ojHf f m 

2 064Sn}T^0 2fflOSn#^£*U ftatiiH 

M^i^^r, s0 2SE»*r»-f-6J(S2 064lra»»-C 
^It^, l-fr-f ^-CHBSFKlTd «fc 7t:Lt, . 

[0060] *»nft«i±ojft<oiinj([«fca<ott*, 

XSS X3 X R mod p 

YffiS y3 X R mod p 

ZffiS Z3 X R mod p 

i:«S (x3Xz3-i, y 3 x z 3 -1 ) £*#>&cot& 
[0 0 6 1 ] [r;vm;XA] 

A*: a, b, n ( a ( a > b > 0 , n «i a <0 

tf ^ h») ) 



*Op' Sr#»&o -LIS^OMiaHmod R Sr <t £ i £ J; 
pXp' = R - 1 (mod R ) 

[0 0 5 7] Rli2^|$Of^fcl»/:A6, fiiSid 

^ h) KHLTIi. px p ' <offi*»i-^T 1 K4&JB£j : 
p' £S-<t?&v> 0 p' ***&r;i/rfuXA{4 



20 

* 

— 0, p' —0 
<7)*^iiY — Y+ p, 



P 



+ 2T 



UJ 



mil : rjLV^c^T&v^J ifcf±b-ix 2n mod a 
mi 7^-X 

u*—a, v«-b, r*-0, s *- 1 
k — 0 

30 v = 0fc*£ST. SkTirMk^i&'to 



2 s 



40 



50 



u 

v 3&*fi»<3 i: # 

v*-v / 2 , r *-2 r 

v § 

u>v<Z)»-£ u- (u-v) /2, r*-r + s, s — 
2 s 

u ^ v (Di%^* v^(v-u)/2, s^r + s, r — 
2 r 

k — k + 1 

u*l&£> r^v^c^-CSrV^J *i&~f 0 
r^a^ib r ^— r — a 
^2 V ^-X 

i = 1 ; i^k-n;+ + 

r r - r / 2 

r r— (r + a) /2 

a — r mL~to 

[0 0 6 2] R=2 192 J: V) n =192(036) t**)^ k 
<n(7)S^ait<^o ^(Dtztb, ±E7;^*ijXA(7) 
»2 7i-XSrJaTOJ:9tw, te5Ri-^o 



(8) 



- n ; + + 
r — r/2 

(r + a) /2 

n ; + + 



13 

k 

i = 1 ; i ^ k 
r 

r fcg 
k< n 

i = 1 ; i ^ k 
r — 2 r 

r > a <7)<h § r r - a 
a — r iM'to 

[0 0 6 3] tfz^ iftttunr^jXAtL 

*isift3, R2mod p mnmKARzrp' mnmnsto 

mS6%M<D&VrWfo 575 8 ^-r- hr*^ £ tu~±;i& 
oifi»»JHaIK 6 com 5 -^r- h o|lIKa«<?5J6SDtc I 

«*-e<o*iiP3ie^»j|[^«kai*n*±. ^6o ms e c 

D ^5MHz, t- + -^S192 tf y h) Tr&»K i£8feS[ 

li* 6 m s e c t HHffiT? § & 0 
[0 0 6 5] * 
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20 



&mw- 11-143 



14 



[HJMcDfBJji&I&K] 

[HI] *»§B<o««KBI!B'?**o 

[a 2 ] t&^t • a^bteaoH«*:^-r*s:Hr * 

o 

[II 4] Kn«*EI»Ofl|jftH-C*4 0 

in 5] R2 m0 d p mMmt&amj8.a-cib&, 
[06] P ' aitj|[iattoflijjftH-c** 0 

[17] Jg&i53£@ig& (^e>^ <; -f v/f-^^H 

1 WLg-giW 

3 iDM^EK 

4 R2 mod p {R#EIJ& 

5 P ' mnmm 

7 XOR (Exclusive OR) HI 



[HI 2] 



[1314] 



[bJ 



Qa= dA P 



Qb=«JbP 



37V h" 



-HEB — II 



[p [b] [0 

1 IS 
P 



£1® 



S2© 



<P64ttl>8 



=fr»'J-2 

I m& h r lFF] — l»2(P6 4ftlgg 



b 



[64 



b 



[F] 164FF I 



$5® 




*4<D 















(9) 



tefflW- 1 1 - 1 4 3 6 8 8 



mi] 



ims) 



Eh— 0" 




CM 
X X 




[me] 



P 63 0 



p62 0 



pi 0 



mzmmwinmMumtmim 



' I ^ ' » 6p 1 



BJU 



CO 



(10) 



ssm^ 11-143 



IMS] 



[H7] 



r 2 mod vmmRoymfm 

pi 91—190 



mS U63-61 



r 



b " b °- 52 




bO b1 — 63 
I I 



[-fFFHsia 6 *mkm h-| 
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